-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 13 Mar 2017 22:03:04 +0100 Source: roundcube Binary: roundcube-core roundcube roundcube-mysql roundcube-pgsql roundcube-plugins Architecture: source all Version: 0.7.2-9+deb7u6 Distribution: wheezy-security Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: roundcube - skinnable AJAX based webmail solution for IMAP servers - metapack roundcube-core - skinnable AJAX based webmail solution for IMAP servers roundcube-mysql - metapackage providing MySQL dependencies for RoundCube roundcube-pgsql - metapackage providing PostgreSQL dependencies for RoundCube roundcube-plugins - skinnable AJAX based webmail solution for IMAP servers - plugins Closes: 857473 Changes: roundcube (0.7.2-9+deb7u6) wheezy-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2017-6820: Roundcube was susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets (CSS) token sequence within an SVG element or HTML message. (Closes: #857473) Checksums-Sha1: 769174830634e057405f8b694349e880b37db860 2395 roundcube_0.7.2-9+deb7u6.dsc 98cda43be3b5abe39c40a34b703b7abddd934572 63831 roundcube_0.7.2-9+deb7u6.debian.tar.gz ae875a1487292a6c8240dcd29af45189d7e69bcc 1034070 roundcube-core_0.7.2-9+deb7u6_all.deb 81c5d0e5d77a4793456404a512ee47c4556f524d 28586 roundcube_0.7.2-9+deb7u6_all.deb 88dc2d4c17dd86c4d4453ebbc35178789e9a6318 28518 roundcube-mysql_0.7.2-9+deb7u6_all.deb 29263845dad72cfeb641607dc6c100edc685226e 28524 roundcube-pgsql_0.7.2-9+deb7u6_all.deb 69578946ef16e403a38b19e098ff16a8869d0a94 322836 roundcube-plugins_0.7.2-9+deb7u6_all.deb Checksums-Sha256: 6eca286b933c95e25cd3ed2480c955dc22c46e80976f06d69be1880b3b7d0aa6 2395 roundcube_0.7.2-9+deb7u6.dsc 1b94f33ee0a6c1e7769b3628019bcbc834ea79e0b316c3c7ae4022230be712df 63831 roundcube_0.7.2-9+deb7u6.debian.tar.gz f37a7ff9b38709c3249f411adf74930e3f654cc319440c8f654ab09610ed1f3d 1034070 roundcube-core_0.7.2-9+deb7u6_all.deb e04a8e293feca6f8c0d99dcdfeeff28b2723644e742be3c578cf359b06cb2ecb 28586 roundcube_0.7.2-9+deb7u6_all.deb 77001f85a57c7b2888f13ff9ba123e31a54a444c7401c7ebec5669aefe08015e 28518 roundcube-mysql_0.7.2-9+deb7u6_all.deb dea3c63e438bff76502c74da2a98915e7f2fc279a882f8c07763c862a5ef2e46 28524 roundcube-pgsql_0.7.2-9+deb7u6_all.deb b80ebe5702d421b4090e9d9ea0bda600c814144f5c9585239a41b13be56540f0 322836 roundcube-plugins_0.7.2-9+deb7u6_all.deb Files: 51ec00bf5a2c1aca4a41b71e698a993a 2395 web extra roundcube_0.7.2-9+deb7u6.dsc e3fbafec01c9189f9f6e2c8d42e6067e 63831 web extra roundcube_0.7.2-9+deb7u6.debian.tar.gz b32011e13b8fa95ae7c5f8441bce2b03 1034070 web extra roundcube-core_0.7.2-9+deb7u6_all.deb a94f253e04306c61a8e2294e8d90ecce 28586 web extra roundcube_0.7.2-9+deb7u6_all.deb 4a3994981ed00f6e93a4db8789458d0e 28518 web extra roundcube-mysql_0.7.2-9+deb7u6_all.deb b2717a25ae03a32bb3d44ce6b5f0cc5d 28524 web extra roundcube-pgsql_0.7.2-9+deb7u6_all.deb 08bea3a9ee2383ce83faee0390d9b57f 322836 web extra roundcube-plugins_0.7.2-9+deb7u6_all.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAljHD39fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hk8iYP/3Ljw9MpQ7s6b5uBMfCYgtexOKx3D/47pn40 y6gJTv/cVVFoZKoFJx8rUZIQi5WR8n9m7E6I8GdfXYdWa2TNa8v/Aboea2GTMvV2 bCyhOPfIGUvYv6J+FCyPvP8mDHM/i/7Luc/KND/Vlnpcxf0rdHhQgo254bG5224O GgifrkG/wgicq4B2Jkc3YdfYWn41a8B8LQ67974zjy7TFDM0cAh8rXkNKetumefa g4VjxUddRk+C2VuxNw/lNBBc4iBkQPgd/AuWO8mULY3UcnlIZUr1H4XH0eLPz+IQ R6WmJPPIOrdxhvXp3420LV7FopE9+4LLzSuUiDJj1jQD1Bw/03FbTZuso8Ppru0+ oOQzYgYgLOGPrp5Z0f3G0rtbc+NlhveiX0HtuqGS1ZcSePLkpmAQmvBBPmmiiVsX 3Vrc70ldYbZ3dXdjLH/9pD72AIIdKWi//o/1uycgztntnhfDCo6ANOjpPHJYBOQ+ cHFsNalykylnwV4wBOKnySuqlbRoq5qI2NZiGTjwZpbs3udDYGCbiIPfmMSlVcud Zedm5wrEj57Rel+LGl+5EPfwKXoPA5D5bSEHrzg9bxdVgG2hgzxjPdiKIWA8RefT jyeGb2Dbz1LSvSpBgy+yQuKPPN6UdO3+KgJl3zsHI2g8LWVSjy7DlkooabYiMXeS 9Y8k+KiI =9Q/K -----END PGP SIGNATURE-----